CVE-2021-36382

Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack against the…

Low · published July 12, 2021

CVSS v3.1
2.6
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack against the connections/partial endpoint (which accepts cleartext).

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AC:H/AV:A/A:N/C:L/I:N/PR:N/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00650 · 50.5th percentile
Published
2021-07-12T13:04Z
EPSS history
Timeline
  • 12 JUL 13:04Z
    Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack against the…
    cvelistv5